locked
Certreq generates only rsp and ful file - no cer. RRS feed

  • Question

  • Hi all,

    I am working on creatign a standalone CA and a subordinate - both servers are Windows Core. I have *.req file generated from the subordinate, copied over to the standalone CA and now and wanted to get the certificate for subordinate.


    When running:

    certreq -Submit file.req

    I only get the *.rsp file. 

    However - when running:

    certreq -Submit file.req file.cer file.p7b file.ful

    I got the *.rsp AND the *.ful file only, not *.cer, no *.pb7 - nuffin.

    Question is - what am I doing wrong here?

    Tuesday, September 15, 2020 7:48 AM

Answers

  • Oh boy I am stupid...:)

    So here it is how I've finally done it:

    certreq.exe -config '.\ORCA1-CA' -Submit .\IssuingCA.req

    Then we need to issue the certificate, and the command to do it is...

    certutil.exe -Resubmit 28

    And export

    certreq.exe -Retrieve 28 .\IssuingCA.crt

    It took me definately too much time than it should, Internet is not very clear about this stuff.

    MAYBE! But thare is just maaaayyyybe... maybe - If instead of "-Resubmit" parameter there would be "-Issue" - so the same as we got in UI, it might took me slightly less time.

    Case closed.


    Tuesday, September 15, 2020 11:26 AM